exclude trivy-system from kyverno policies

2026-03-26 13:34:00 +01:00
parent c33abcc357
commit 1609f6afde
2 changed files with 3 additions and 0 deletions
--- a/cluster-resources/policies/deployment-verifier.yaml
+++ b/cluster-resources/policies/deployment-verifier.yaml
@@ -23,6 +23,7 @@ spec:
          - monitoring
          - argocd
          - traefik-system
+          - trivy-system
    context:
    - name: ownerReplicaSet
      apiCall:
@@ -59,6 +60,7 @@ spec:
          - monitoring
          - argocd
          - traefik-system
+          - trivy-system
    skipBackgroundRequests: true
    validate:
      allowExistingViolations: true
--- a/cluster-resources/policies/label-checker.yaml
+++ b/cluster-resources/policies/label-checker.yaml
@@ -26,6 +26,7 @@ spec:
          - monitoring
          - secrets
          - kyverno
+          - trivy-system
    match:
      any:
      - resources: